Recur Agent: an AI agent that works under supervision

Useful AI should not cost you control.

To be genuinely useful, most AI agents need your emails, files and logins in someone else's cloud. For regulated and confidential work, that is a non-starter. You should not have to choose between useful and safe.

What it does

Real work, end to end.

1 of 4Works across your tools

Works across your tools

Reads the thread, files the follow-up, drafts replies in your voice. Google Workspace, Microsoft 365, Dropbox, Slack and more.

2 of 4Runs your playbooks

Runs your playbooks

Recurring workflows and follow-ups you approve once, then re-run on a schedule.

3 of 4Builds real documents

Builds real documents

PDF, Word, Excel and PowerPoint, generated on your own machines.

4 of 4Knows your people

Knows your people

Builds its own private knowledge base, with the right tone and honorifics per contact.

Under the hood

What the sequence relies on.

Four mechanisms, each on your machines. None of them is a claim; each is something you can watch happen.

1 of 4Signs in without seeing the password

Signs in without seeing the password

Credentials live in a vault on your machine. The agent asks by reference; the runtime fills the field, bound to the page it was saved for. The value never enters the model.

2 of 4Reaches any system you can log into

Reaches any system you can log into

A real browser it works like a person. A skill that declares an API and, once you approve it, is a connector. Programs it may run only where you have granted it. A reviewer checks what it would send.

Find this month's statement on the vendor portal.

Pull the invoices from the vendor's API.

Run the month-end reconciliation.

Searched the vendor portal, found August's statement and downloaded it. Saved to the client folder.

No connector existed, so I declared one from their API and you approved it. Next time it is a click.

Ran it on the finance box, where you granted it. Output on the record.

Vendor portal+

‹ ›vendor.example/portal/documents

Acme VendorDocumentsInvoicesSupport

statement august 2026

Statement, August 2026PDF

Statement, July 2026PDF

Statement, June 2026PDF

statement_2026-08.pdf

New skill: Vendor API

GET/invoicesGET/invoices/{id}POST/paymentsauth: your key, from the vault

Waiting for your approvalApproved by you

Connector ready. Reusable next time.

Program, where granted

Granted: finance-box

$ reconcile --month 2026-08reading ledgersmatching entries14 unmatched, written to review.xlsxdone, exit 0

3 of 4Answers from your own documents, with the page

Answers from your own documents, with the page

Your folders, mail and threads, indexed on your hardware, scanned pages included. Every answer points at where it came from.

4 of 4Remembers your people and what was agreed

Remembers your people and what was agreed

A private page per contact and project, built from your own threads. Tone, honorific, what was agreed and when. Nothing is uploaded anywhere.

Why it stays yours

Under your control.

Three things you decide, not us.

1 of 3Where it runs

Where it runs

On your team's own computers, with the AI model you choose. Running models on your own hardware is an option, not a requirement. Hosted private GPU option for pilots.

2 of 3Your model

Your model

Any cloud AI on your key, or open-weight models on your own hardware. Never locked to one provider.

3 of 3Your control

Your control

A reviewer checks what the agent would send. What it questions waits for you. Its actions are written to an audit log.

Controls

Everything that stays in your hands.

Credential vault. Logins live on your machine. The agent asks by reference and never sees the value.

Reviewer. A separate check on what the agent would send from your accounts, before it leaves. It need not run on the same model as the actor.

Your approval. What the reviewer questions waits for you. A held item says why it was held.

Audit log. The agent's actions, written with the time as they complete.

Where it runs. On your team's own computers. Your own model hardware is an option, not a requirement.

Any model, your key. Cloud models on your key, or open-weight models on your hardware. Never locked to one provider.

Indexed where it lives. Folders, mail and threads are indexed on your hardware. Nothing is uploaded to be searched.

Signed builds. Mac builds are signed by Recur Systems Limited and notarized by Apple; Windows builds are code-signed.

Recently built

What changed lately.

Oct 2026Photos by what they show
Ask for a beach and it finds one. Indexing reads a folder's photos on your computer and never sends them to a cloud service.
Oct 2026Workflows that repeat
A card shows the time and the next three runs. Nothing is scheduled until you choose Schedule.
Oct 2026No API key needed
Sign in with OpenRouter during setup and choose a recommended, lower-cost or free model. One switch for zero data retention.
Oct 2026Email over IMAP
Email accounts that support IMAP, custom domains included.
Oct 2026Computer use on Mac, a first step
With it switched on, the agent can read a window you allow. It cannot click or type yet.
Oct 2026A sandbox on Windows and Linux
Commands the agent runs on Windows and Linux now run in a sandbox.

The pilot

Prove it in 60 days.

Day 1One team, full platform, on your own computers. Delivered hands-on by the team that built it.

Day 60Your call.

ConvertFixed price, credited against your license.

Walk awayIf it does not earn its keep, you stop there and pay nothing more.

Contact us

Pilots, partnerships, or a problem with the app. A person reads this and replies.

Received. A person will reply from a recur.ag address.

An AI agent that works under supervision.